CVE-2023-1972

A potential heap based buffer overflow was found in _bfd_elf_slurp_version_tables() in bfd/elf.c. This may lead to loss of availability.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.5 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
redhatCNA
---
---
CVEADP
---
---
CISA-ADPADP
6.5 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 13%
VendorProductVersion
gnubinutils
2.35 ≤
𝑥
≤ 2.40
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
binutils
bullseye
unimportant
bookworm
unimportant
trixie
2.43.50.20241215-1
fixed
sid
2.43.50.20241230-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
binutils
noble
Fixed 2.40-2ubuntu6
released
mantic
Fixed 2.40-2ubuntu6
released
lunar
Fixed 2.40-2ubuntu4.1
released
kinetic
Fixed 2.39-3ubuntu1.2
released
jammy
Fixed 2.38-4ubuntu2.2
released
focal
not-affected
bionic
not-affected
xenial
not-affected
trusty
not-affected
gdb
noble
not-affected
mantic
not-affected
lunar
ignored
kinetic
ignored
jammy
Fixed 12.1-0ubuntu1~22.04.2
released
focal
Fixed 9.2-0ubuntu1~20.04.2
released
bionic
Fixed 8.1.1-0ubuntu1+esm1
released
xenial
Fixed 7.11.1-0ubuntu1~16.5+esm1
released
trusty
ignored